pNSF.Bf i'i VSMHt \HO\COMlHn, M\IOviM»K 
IF APPROPRIATE] 

10. Is tbs'' system/projeot the .subject of an. OMB-300 budget submission? 

.. NO 

YES II yes, please provide the date md mm* or 
title of the OMB snkntisOnm 

! 1. Does the system conduct data, mining as defined in Section 804 of the 

bofbcmcryrc Re^ornHe H r e >•» 0*1? " * 1 Cere or V of .Vo". P l I V~ 
5.3 (codified at 42 USC 2000ee~3)? 

.NO 

YES If yes, please describe the dais mining function:: 

12. lb this a national, security system (as determined by the See/D)? 

.NO .YES 

13. Sian.es of System/ Project: 

1 v -a \h -O'-' a ... _ or' e . 111 son checked this block. 

STOP, The FT A is now complete and alter division approval^} should he 
submitted m FBI OCiOPC.'LO for lion! FBI approval and deierammiinn If 
PI A and/or other actions arc required. ; 


O, EXISTING SYSTEMS / PROJECTS 
L When was the sysiem/proiect developed? 

2 Has the w. wen. project hVhoh, am, SHmfkvuit changed cake '\o '~ Y 2x V ' 
NO (If no. proceed to next question (11.3 s ] 


YES B' \cs, bidka-c own a -u '.he HHevnv eh a vac/ owe invoked pitark all 
eha.ng.es that apply, and provide brief explanation for each marked change): 

_Wne,o vp v hke ox\ on jabelec t .h..i 

A'il | e * ' r ' o ■* $ , s s' , y s o* 

ve"u hNc xo * hh' i ■? '. 'do nnraOe to w cxy a>.' ib\ xx/eN 

\ s .vn use of an \!' .\Wem p'Heot. 1 Ym'g application of a new 
Her aesoox that «M;gcv be* mforhxiticc m hc WlV xho ^ .'unused 


| IN SOU CLASS! F1C. AT f ON/COM MIL SI AEICINGS, 
IF APPROPRIATE} 
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ilNSERTCIASSIFlCATJONVCONTROL MARKINGS, 

IF APPROFRl'ATE| 

(For example. a change (ha?. would create a more open environniertt and/or 
avenue for exposure of data, that previously did no? exist.) 

A change that results in foformabon in identifiable form being 
merged. centralized. or matched with other databases. 

A new method of authentication the use of and access to 
information in identifiable torn? by members of the ps.ibi.ie. 

A systematic incorporation of databases of information in 
sdentrllabie form purchased or obtained iron? commercial or public seances. 

A new uuemgenoy use or Alarm! agency fuo.cii.on that results rn 
new uses or exchanges of information us ids no hah h harm. 

A change that rests its in a new esc or disclosure of Information in 
Identifiable form, 

A change that results In new items of information in identifiable 
form being added into the system pro:cmo 

Changes do not involve: a change its foe type of records maintained: 
the individuals on v? bom records are mannamed, or the use or 
d insets si not ion of information from foe systcm/proiect. 

Other I Provide brief explanation): 

3. Does a PIA for this system:'project already exist'? 

NO YES 

If yes: 

a. Provide dau-Artk- of the Pi A: 

b. Has the systemonoicct undergone any Significant changes since the PIA? 

.NO .YES 

[The FI A is now complete ami after division approvjfox} should be submitted to 
PM OCIC/PCLIJ for final FBI approval out.! determination if PIA and/or other 
oeikms are required^ 


[INSERT a.ASSIFICATiON'/CONl'KOL MARKINGS, 
IF APPROPRIATE! 
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NAME Of SYSTEM!! 


;r !"A) Cover Shot 


FBI SYSTEM CONTACT PERSON 


FBI OCC/PCUJ POC 


FBI DIVISION APPROVALS. A PlO 


3C me PTA/PfA most aim ! 


ml OGCdYUO {PiAsOTAs 
viiivn Act should also be eoord 
rent cog ranee of an FBIHQ 
: the FB11IQ Divi Aon ter pmgr 


ogram Manager Signature: Or 97 gu; a y. 

r other appropriate Date atoned: r sonsm« y; 

VVXV X - si ViJ pi. X 

••ermines} Title: Director. NGiC 


€0.) Pn vaev Officer 


, tbnvard signed hard copy pros 


hue OOIO Preaex ODer 
v \ tA.x 


FINAL FBI APPROVAL: 


Dae Signed 
Name: 

Title: 


gned ori ginal to 190-HQ-CI a21794 


A ', oOCn''t lv;D x shoe AD o rnsum ;0 m . 

- 1 HOP e ' CRT 

- 1781 Sect) (electronic copy ha e-mail} 

’ - Program Division POC /Frhaev Officer 
OBOp'hixoO'O. On^ 1^;^ 

'' ' > •. ' ee s. > ^ x x i t 0,1 ' i v t\ 
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ii:Nsii;Ri'<:i,ASSo : iCA:riON/<:x)NTeoi, markings- ii :: apfropki asir 

FBI PTAi fbnm of swcroprenecr; 


b3 

b7E 


2. IN>.05 the systenNprpiecl eoikeL n-j.aint.pin, or disseminate any -nibnnation about individuals in 
identiiiabK lorrm U., jo hbonuahon baked to or linkable to specific individuals (which A tire defmiuoo 
of personally i dentil Abie information (Eli)}? 

.NO. ||f n% STOP- The FT A R now camp fete arid after division approval's) should he 

csEnfUtted to FBI. OGC/BCLf.i for find FBI approval Unless son are otherwise advised, on 
IN A is requires!^ 

............ YES. [If yes, please continued 

.X NO. . YES. 

hotn the system/proRol by name or other personal identifier'? 

.YES:. 

o. Are Social Seocmy Nomberc (SSNs) ccdlected. maintained or dweeb rated from the system/bnSect? 
.X..... NR- .YES. If yes, cheek nil tints' apply: 

...,,,... SSNN axe important: rot' other reasons. Describe: 

Fwlmm 

kbbrrnsoca;? 

(INSERF CL.ASSJEl(.:.\ FR.)N/CON mOL MARKINGS, IF AlNNIOMf ATE1 PDTr 
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jhNSERT Cl.:ASSlFICA'F!<>N/C'<)Nl'ROI., M ARKINGS IF A PPROPRIATE) 

FIR PTA: jmswt wow of syueevywa wb 

.YES. 

.X.YES. {Nym. proceed to question 7.) 

NO. 

b. Are subjects of hb/Amation Novo whom rite information is di reedy so Ex rod provided a written 
Privacy Act (e)(3) stmemem (either on tire codec Sen term or via a rep,ante notice)? 

.......................... NO, [The pro grant will need to work with PO./0 to deveiop/impfemenUlte 

necessary formfsjOI 

..........X,....... YES. Identify any forms, paper or electronics used to request' such 

mforatatkm from Rut Information subject: 

Y - •.,.* v <■ < > ^ 

. NO. If oo, indicate reason; if C&A is pending, provide soticipated completion da te: 

. .X YDS. If yes, provide date of Iasi €<&A eertilicoRon./reAcrtIScattott: The FBI 

| I rcceived an Authority to Operate for 3 years Rom the Sect:rio Division on 1/25/OS. 

........................ Know. 

U. Is has sysmrw project me saqjeet of an OMB-300 budget, submission? 

...X.,..,.,,.,.. Ns). .Don't know. YES. if yes, please provide the date 

and name or title at'the OMB sohmissfow 

?. Is this a national security system wo determined by the S,.dm? 

.NO. .X.YEN. Draft know. 

. A . - x f s 0 w ' v t chewed bw I (ah. ^ I Of 

Hu \ is now x os pVs undutTi Jo wa'^aopU'W,.*, - hon'd K mhui OsM 
hi FIJI ORC/RCLE for .float FBI approval and doh-rodmRmo if El A and/or 
other actions are required ,} 

H. EXISTING SYSTEMS / PROJECTS 

nXN'Rtft Uit*\*0\H<oi ERMYmh "•''A'MaH p DT r coo 
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FBI PRIVACY THRESHOLD ANALYSIS (FLA) 


A \XB \'S \Ui ' v \ s x x v ' X 


BIKR FBI IMqut Asset !!>:; 


FFvh<-d FYssssk 
t'Ossie tk-st By. 

Fuasxoss; 
fkVasVfy On; 

SYS'FEM/FROSECT FOC 

PHI 0*A' Ft ^ 1 FCR 

Setae;: | j 

Fsxxerais Oii'ke: EsaisxteteR 'Oak 
i>t ::asev Siu-tx&e Resources 

Phone: 1 “ ! 

Foots? Nsotsbcr s 0975 

Sense: 

Room Number: iB I 7350 





5 m s^\hk)\ m\n \pi*rox v ^ , v ^|4ek **«<^n.* .. 



Ps'stgtam Mstoayet (os' other appropriate 
executive au phusioa OeiontOeex • 

S * l \ x> x 

lO'sersa?;; Dxvsseo?: 

D? 

SkeBufe: 1 j 

\ x X j | 

Rate enotcd: ■ - :vwv s'.:.. 

Date ;Csteed: nr Vs " J< "' 

N,:.m C :| | 

Nxree:]- -1 

Rke: heavy HR Specs a.0 si ilkni Rhsc?) 

Yhku hstevy Myee A. Program Analyst 
:l res ? hi' B 

FBiBs) Division: 
rOotssot Rso-etas'Ces 

Di. 4 ,, e j: Stef is Projram DsviSinn 

Styes??. s?.;\;: 

Name:" 


X \ V ^ \ * <" \X1S, N X ^ S?V M« Si,\ ^\ \ \ 'x S? *N X xX N x X ' N S ** xF xA\X ? * t " 

OB BevVy pace.; 
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* \ N X S W 1 X V \ N t \ X * 

POJ g l | FI \ s ignis v * h.'-' f '\o«su!' |egfj| " M§ El|g s|g !?!? !!5] 



F1A is nor repaired for the l-ikivong reasonCs): 

System does not collect,. ma-mah::. ox disseminate Pil. 

Sxx:<:;?! is p-andlsrhered (a; existence he tore d/i/lNKA; no later changes post tty: Significant privacy risky}, 
x kdhrrnaion m she system robins to mtetonl nexenum-xu operadorts 


System has been previous ly assessed under an exafuauon simitar to a Fid. 



' x X \Xx S > \ 0 X d 'x \\ X "X 'x ' \ ' x' X X ' x " X v X x X x „x x x. X X ' x X 

The system may comam Federal records whether or not if contains Privacy Act requests and, in a ay event, a records 
schedule approved by the National Archives and .Records Administration is necessary. RAID can provide advice on this 
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L INFORMATION ABOUT THE SYSTEM / PROJECT 


1. Frovlde a genera! description of the system or project tkM lododes: <a) frame of 
the system/project, inchtditsg associated acronyms; (h) structure of the 
syslons/proJoeE rndadrag mtsremmeeinmx with other projects or systems; (c) 
purpose of the eystettvprojeet; (<i> usiore of the information In the system/project 
md him R will be used; <e> who will have w« to the .Information in the 
ywem pimeD; rft and the manors of t$ ansmwshm to ah asms s m kmc e 
imbrrnabon may be available in tbs System becurhy Piatt, if available, or from a Concept 
of Operations document, and can be cat and pasted horc.b 

ORB Assist - Web Version (G.RB) is software used on the traentai PBIN bl by FBI V 
Human Resource Division (HRD; personnel. This software provides the ability to 
v sfe# o< > ! i n v v v )„ n >, „e m o Ov v '' i v 

computations lor the FBI’s administration of tbs -federal retirement systems, it provides a 
variety of computation lords to assist the PBi's HRD personnel m applying site various 
laws and regulations that affect an employee's service history and retirement benefits. 

The tool assists m deferrmmng service computation dates, mtamincm service credit 
conversion, part-time prom tarn factors, social security supplemental payment under 
Federal employment Retirement System (FuRS), post-So military service deposits, 
redeposits and deposits for civilian service, and other caicidadons/deteroainabons based 
on employee information obtained from other sources (Bureau of Personnel Management 

N ,\v.V s \ ' 

and entered into the system by HR personnel. ORB allows HE personnel to build an 
employee profile-centric service history and to perform functions to assist each employee. 
The GRB ts linked to the HKD’s shared drive so the Retirement Unit (Rif) can pub the 

The employee profile and history to be bunt may include as little as an employee's name, 
date of birth tOOB), social security number (SSN). retirement coverage, earnings during 
the last three years oil service and retirement Service Computation Dare (SCO); or as 
extensive as an employee's complete service history and retirement coverage, 
information on multiple retirement coverages, historical earnings from beginning through 
end of federal career, social security earnings, military service dates and earnings, part- 
time and Mi-time hours worked tor entire career, intermittent service dates, survivor 
elections, retirement coverage detennmatrons, Federal Erroneous Retirement Coverage 
Correction Act (PER CCA} dele mil nations and 'benefit comparisons. Anneal Leave lump¬ 
sum payment estimates, leave balances, and Thrift Saving Plan (TSP) corn potation s. 

It o e,cd , ^ v > ' ' <C pe v e e-, ^ 

retirement estimates, service computation dates, average salaries, redeposus deposits, 
FERCCA comparisons, for example, for use by employees and survivors m making 
retirement decisions and other reports for use by FBI's HRD personnel in making service 
and retirement coverage determinations. The reports are printed to bard copy or saved as 
a PDF hie and emailed to employees. A copy of the report tan internal "tickler die") is 
kept and; die employee retires or a new report Is generated. Only 25 licenses are 
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authorized for use by personnel in the Employee Services Section of HRf> ORB is a too! 
designed to assist an UR Specialist in comofelmg assignments. The tickler file ?s kept by 
the Retirement. Unit for Retirement Unit employees to reference any past workdone in 
determining various estimates, SCDs. retirement errors, FERCCA corrections, or military 
deposits, for example. 

In addition to information Technology (IT) support personnel employees m the 
following units of the FBfs HRD will have access to the system: Retirement. Benefits. 
Payroll/Personnel lotions Processing. Finte and Attendance Special Pay 

l he FBI hosted system requites Windows Service 2oiU 2 O>I? ,! 0 g running f IS 5.tv M* 
7.0 or greater, and a backend database of Oracle 9i or greater or SglServer 2005 or 
greater. 

2, Does the s>.stem/project collect, maintain, or disseminate my information about 
individuals tie., a human being or natural person, regardless of nationality!? 

NO |lf no, STOP, The PTA Is now complete and after division approraI(s) 
should be submitted to fill 0€€7P€i. 1 for final FBI approval, 1 Mess you are 
atherwiae advised, m HA. is mpttretif 

_X YES pf yes, please continue,| 

3, Please indicate if any of the following characteristics apply to the information in the 
system about individuals Bear in tntnd that log-on information may identify or be 
linkable to an Individ tab. 

(Check all that apply.) 

.X.The Information directly identities specific individuals. 

The information is intended to be used, in conjunction with other data elements, 
to indirectly Identify specific individuals. 

_X_The information can be used to distinguish or trace an individual's identity tie.. It 

is Linked or linkable to spec tile individual si. 

If you marked any of the above, proceed to Question 4, 

\ ne of he above f no. e % > the above, r he wi the morn at on does not 
tdentiR speeuw individuals eithe: directly or induce y If yon checked his it 
STOP here after providing the regneaied description.! 

4, Does the sy.stem/proieet pertain only to government employees, contractors, or 
consultants':' 

_NO 
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The System only pestams to government employee mioTmahoo: 
however. iafbrrnaikm from the system wilt he shared whh survivors 
In the case of an employee death; or family member, if a family 
member is assisting. m a disability retirement case. Bee. these family 



NO. flf my skip to quxsiitm T.f 


X YFS. lif yes, proceed to the amt <pestinn.| 



NO 


if yes, proceed to qaesbon 



NO [The program will need to work with PCU; in rkvelep/impleroent' 


the necessary form(s}.| 


Y ES Identify any terms, paper or electronic, need to fcqeesi sued 
information from the Information sobtect: 
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_SSNs :rc necessary to estabhsh eonlum the identity of scogxts, victims, 

witnesses or sources in this law enforcement or Intel igence activity 

_X_SSNs are jaecess&ry to identify FBI personnel in this internal 

administrative system. 

_SSNs are important for other reasons. Describe: 

X The system/prajec? provides special protection to SSNs (e.g.. SSNs are 
encrypted, hidden from all users via a look-up table, or only available to certain 
users) Describe: SSNs are not printed on my final documents produced fey the 
system. 

It is not feasible for the system/project to provide special protection to 
SSNs. Explain: 

8. is the system operated by a contractor? 

_X_No. 

Yes. Information systems operated fey contractors for the FBI may be 
considered Privacy Ac? systems of records. The Federal Acquisition Regulation 
contains standard contract clauses that must he included in the event the system 
collects, maintains or disseminates Pi! and additional requirements may he 
imposed as a matter o* Department of Justice policy Consultations with the 
Office of the Genera! Counsel may he required if a contractor is operating the 
system for the FBI 

9, Has the system undergone Certification & Accreditation t C&A) by the FBI 
Security Division (SecD)? 

_X_NO If no., .indicate resssoo; If CX.4 Is pending, pro vide n.nticipaied 

eompletiaa date: For Security Division o f | Information 

Systent Security Manager (iSSM). this is an application not a system (GRB Assist) 
that is maiding on the Secret Enclave; therefore, a separate CAA is not required. 

_YES If y es, please indicate the following, if known: 

Provide date of last CStA eeriifleafhm/re-ceriilicailotit 

Confidentiality:_Low_Moderate_High_Undefined 

Integrity: Low_Moderate_High_Undefined 

Availability: _ Low Moderate High Undefined 
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Not applicable ■ this system is only pa per- based. 
tO. Is this system/greneot the subject of an OMB-oOO budget -submission/? 
.X.NO 


YEN I f yes, please provide the slate and mime or 

title of the 0MB submission:: 

11. Does the system conduct date mining ns defined in Section 804 of iho 

implementing Recommendations of the 9/11 Commission Act of 200?. Pi.-. 110- 
5.1 (codified at 42 DSC 2tXrOee-3)2 


YES If yes, please describe the data mining fonetien:; 

12. Is this a national security system (as determined by the SecD.t? 

.X.NO .YES 

13, X'o Y '“Uv.'s P.en\' 

This is a new system/ project in. development. j I f von cheeked this block, 
STOP. The FIX is now complete and after division approvm(s) shook! he 
submitted to Fill CKIC/FCLU for lino! FBI approval and determination if 
PI A and/nr other a mums are rmpdredd 


III FA1Y|'|\<, alM'f'AfS FR< MIX' i ^ 

1. When was the system/project developed? 

of 4 'rns > , tv <» " V > " > v vwee w , W U t , u m 

years arrd purchased offeihe-sheif. in 2010 GRB stopped sttpporting the staudaioue 
version and only offers a web-based odNhe-shdf product, with Agency Hosting sagency 
downloading stdBvare and updates Rom GRB, risen uploading and supporting on internal 
oetwork. database) as art ()ption. 

2. Has the system/projeci tmdergorte any significant changes since April 12 : 20032 

Nt> [if no. proceed to neat question Hi.3) 1 


X YEY if yes, indicate wind: of the following changes were involved (mark all 
changes that apply, provide brief opianatien for each marked changer. 
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.. A convcn-wa from paper-based records to an electronic system. 

A change from information in a format that is anonymous or now 
Identifiable to a formal dart is identifiable to particular individuals. 

A row asc of an IT syoeorprojoo. including application of a new 
technology, that changes how information in identifiable form is managed. 
(For example, a change that would create a more open environment and/or 
avenue for exposure of data that, previously aid not exist.) 

A change that resells in information in identifiable toon being 
m v c 1 e w ^ ^ i >oi\ 1 'fo oA v o ' On 

A nets method of authenticating the use of and access to 
information in identifiable form by mcefoers of the public. 

A systematic incorporation of databases of information in 
identifiable form purchased or obtained from commercial or public sources. 

A new interagency use or shared agency function that, results in 
eon mm o: Ovduugw of cuomunoc m Aenohahk new 

A change that results in a new use or disclosure of information in 
identifiable term, 

A change that results us new items of information m identifiable 
form being added into the systern/profoet. 

X Changes do not involve a change In the ty pe of records maintained, 
the individuals ms whom records asm maintained, or the use or 
dissemination of information from the sysiern/projeot. 

\ w'A -5 fpi-iaeC hrlefowpbvmufoob fofiuhe-\hell mu a are 

changed from a standalone version, to a web-based product with agency 

3. Does a Pi A for this sysrenu protect already exist? 

X.NO YES 


a, Pros hie date/Mle of (be Pi At 

!>. Hus the systeto/poalect undergone any significant changes since the PI A? 
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piss PT.4 b m>*v ecuapUse sad stor <1H 
FBI OGC/FCUj for final FBI appro 


s. if I'M A aiB/sir isbier 


are required, ] 
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FBI Privacy Threshold Analysis (PTA) Cover Sheet (ogc/pclu (Rev. 07/06/07) 


NAME OF SYSTEM: GTMS (GETATraining Management System} 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: i I 

Program Office: TD GETA office 

Division: 2 - Training 

Phone: | i 

Room Number: Biograph Bldg. 

Date PTA submitted for approval: 

Name: 

Phone: 

Room Number: 7338 


FBI DIVISION APPROVALS. A PiA (and/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 
the Paperwork Reduction Act should also be coordinated with the RMO Forms Desk.,) If the subject of a PTA/PiA is under the program 
cognizance of an FBIHQDivision, prior to forwarding to OGC the PTA/PIA must also be referred to the FBIHQDivision for program review and 
approval, if required by the FBIHQDivision. 



Program Division:Training 

FBIHQDivision: Training Division 

Program Manager 
(or other appropriate 

executive as Division 

determines) 

Signature: /S/ 

Date signed: 02/27/2008 

Signature: /S/ 

Date signed: 02/27/2008 

Name:| | 

Name: | ] 

Title: Management & Program Analyst 

Title: Management & Program Analyst 

Division Privacy Officer 

Signature: /S/ 

Date signed: 02/27/2008 

Name: Michael J. Stephens 

Title: TD CSO 

Signature: /S/ 

Date signed: 02/27/2008 

Name: Michael j. Stephens 

Title: TD CSO 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JEH Room 7338). 

FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: 

N 


Date Signed: 

03/10/2008 


Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBI approval, FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ-C1321794 




1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO /OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC/Privacy Officer 
2*- FBIHQDivision POC /Privacy Officer 
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1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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(*please reproduce as needed for Program/Division file(s)) 


For efficiency, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 

The GETA Training Management System (GTMS) is an enterprise-wide workflow tool providing FBI employees 
with a web-based interface on which to request and track requests for GETA training (job-related training for federal employees 
paid for by the employing agency, pursuant to the Government Employees Training Act). The individual requesting training 
completes an electronic form available on the Training Division's GETA web-site. That form is then routed electronically 

through appropriate reviewing and approving officials. 

The electronic form includes information about the individual requesting training (including name, social 
security number, job series, job title, and grade), information about the training course requested (such as the title of course 
requested, justification, course objective, vendor information), cost/funding/ billing information, and the name, e-mail address 
and electronic signatures of reviewing and approving officials. While the individual requesting training provides his social 
security number on the electronic form, the Training Division is taking steps to "mask" the social security number so that it is 

no longer visible to others reviewing the training request. 

a. If the system is solely related to internal government operations please provide a brief explanation of the quantity 

and type of employee/contractor information: 

GTMS will contain supporting information about all requests for GETA training by FBI employees. As noted 
above, GTMS will contain information about the individual requesting training, the training course requested, the vendor 
providing the training and reviewing and approving officials. 

The system is solely related to internal government operations and is available to all FBI employees though the FBI's 
internal computer system (FBI Intranet). 

2. Purpose for collecting the information and how it will be used: 

The information is collected to track, approve/deny GETA requests submitted by FBI employees. 

3. The system's structure (including components/subsystems): 

GTMS operates using Sharepoint/InfoPath linked via FBI Intranet SharePoint is a Microsoft product that 
supports network file sharing and colloboration. Infopath is a Microsoft forms application located on individual desktop 


4. Means of accessing the system and transmitting information to and from the system: 
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GTMS can be accessed by FBI employees using the FBI intranet. Information is transmitted to and from GTMS 
by use of Sharepoint and Infopath. An individual requesting training will access GTMS using Infopath and then complete a 
training request form. The form is then transmitted back to GTMS, where SharePoint permits supervisors and other authorized 

individuals in the workflow process to access the form and take appropriate action, such as reviewing and approving the request. 


5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

A list of "Groups and People" has been established for each FBI division and field office. Only those 
individuals belonging to these groups have access to the GETA requests for their respective office/division. Additionally, 
anyone identified within the workflow will have access to track a specific GETA training request, including the individual originally 
completing and submitting the GETA form. Individuals assigned to the Training Division's GETA office, presently consisting of 
| [p ersonnel including supervisors, have been granted access to all FBI GETA requests, since this office was responsible for the b7E 

GTMS rollout and provided training on the use of GTMS to all FBI entities. Individuals accessing GTMS must do so using 
individual-specific user names and passwords. Any individual accessing a workflow document (such as supervisors reviewing or 
approving GETA requests) leaves an electronic signature detailing their access, with the date and time of their action on the 
request. 


6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 

GTMS was created by an FBI contractor ] | Contractor personnel (currentl)Q W& 

individuals) also have access to all GETA requests in the GTMS to facilitate troubleshooting any difficulties occurring with this 
new system. When the development process for GTMS (including troubleshooting) has concluded, GTMS will be turned overto 
FBI/TD for operation and maintenance, at which point contractor access to GTMS will terminate. 

The contractor personnel assigned to the GTMS project have been granted access to necessary FBI systems through the 
Security Access Request (SAR) process and have been assigned individual FBI usernames and passwords. Their access and usage 
of FBI systems is subject to audit by the Security Division to ensure system integrity. 

7. Has this system been certified and accredited by the FBI Security Divisions? X Y es _No kg 

Per l l Executive Assistant to the Director,Training Division. b7C 

8. Is this system encompassed within an OMB-300? _Yes X No _Don't Know 

(if yes, please attach copy of latest one.) 


I. Was the system developed prior to April 17,2003? 

_YES (If "yes," proceed to Question 1.) 
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_X_ NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 


(Continue to Question 2.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is 
required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 
_YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for 

review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is 
required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 

Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless 
you are otherwise advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to 
require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 

II. For systems developed after April 17, 2003. 

1. What is the purpose of the system? (Answerin detail unless details already provided in A.2 above): 

The GETA Training Management System (GTMS) is an enterprise-wide workflow tool providing FBI employees 
with a web-based interface on which to request and track requests for GETA training (job-related training for federal employees 
paid for by the employing agency, pursuant to the Government EmployeesTraining Act). The individual requesting training 
completes an electronic form available on the GTMS web-site. That form is then routed electronically through appropriate 
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reviewing and approving officials. All approvals are gathered via Microsoft Outlook emails. 

The electronic form includes information about the individual requesting training (such as name, social security number, 
job series, job title, and grade), information about the training course requested (such as title of course requested, justification, 
course objective, vendor information), cost/funding/ billing information, and the name, e-mail address and electronic signatures 
of reviewing and approving officials. 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 

_X_ YES (If "yes," please proceed to Question 3.) 

_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, 

approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is 
required.) 


3. Is the system solely related to internal government operations? 

_X_YES If “yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," a full PIA is required.. PTA is complete.) 

_X_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties 

Unit (PCLU) for review, approval, and forwarding to DOJ's Privacy and Civil Liberties Office. Unless 
you are otherwise advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to 
require a PIA.)) 

_NO (If "no," go to section III to determine if a full or short-form PIA is required.) 

III. Full or Short-Form PIA 

1. Is the system a major information system (as listed on OGC's FBINET website)? 

_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 

_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 

6.2,6.3, and 
8.9 of the 
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FBI PRIVACY THRESHOLD ANALYSIS (PTA) 

NAME OF SYSTEM: GTMS (GETA Training Management System) 


PIA 

Please note 
that FBI and 
DOj 

reviewing 
officials 
reserve the 
right to 
require 
completion 
of a full PIA. 

(PTA is 
complete—f 
orward with 
PIA.) 


_NO (If "no," a full PIA is required. PTA is complete.) 
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FOR OFFICIAL USE ONLY 

NAME OF SYSTEM: | [ b7E 


FBI SYSTEM CONTACT PERSON 

FBI OGC/PCLU POC 

Name: j j 

Name: 

Program Office: RSDU 

II 1 2 ' 

Division: OTD 

Phone | | 

Phone: | | 


Room Number: B340 

Room Number: 7338 

DaLe PTA submiLLed for approval: 4/21/2008 



FBI DIVISION APPROVALS. A PIA (and/or PTA) should be prepared/approved by the cognizant program management in 
collaboration with IT, security, and end-user management and OGC/PCLU. (PIAs/PTAs relating to electronic forms/questionnaires implicating 

the Paperwork Reduction Act should also be coordinated with the RMD Forms Desk.,) If the subject of a PTA/PIA is under the program 
cognizance of an FBiHQ_Division, prior to forwarding to OGC the PTA/PIA must also be referred to the F8!FIQ_Division for program review and 
approval, if required by the FBlHQ Division. 



Program Division: jRSDU/OTD] 

FBIHQ.Division:[insert division name] 

Program Manager 

Signature: /s/ 

Signature: 

(or other appropriate 

Date signed: 4/23/08 

Date signed: 

executive as Division 

Name: | [ 

Name: 

determines) 

Title: Electronics Technician 

Title: 

Division Privacy Officer 

Signature:/s/ 

Signature: 


Date signed: 4/23/08 

Date signed: 


Name: Charles Barry Smith 

Name: 


Title: Section Chief 

Title: 


Upon Division approval, forward signed hard copy plus electronic copy to OGC/PCLU (JEH Room 7338). 


FINAL FBI APPROVAL: 


FBI Privacy and Civil Liberties Officer 

Signature: /s/ 



Date Signed: 5/8/08 



Name: 

David C. Larson 


Title: 

Acting Deputy General Counsel 


Upon final FBI 


approval, FBI OGC will distribute as follows: 

1 - Signed original to 190-HQ : C1321794 


1 - DOJ Privacy and Civil Liberties Office-Main Justice, Room 4259 

2 - FBI OCIO / OIPP 

1 - FBI SecD (electronic copy via e-mail) 

2* - Program Division POC /Privacy Officer 
2*- FBIHQDivision POC/Privacy Officer 

(*please reproduce as needed for Program/Division file(s)) 


1 - OGC\PCLU intranet website 
1 - PCLU Library 
1-PCLU Tickler 
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NAME OF SYSTEM: | | b7E FOR OFFICIAL USE ONLY 

For efficien cy, a system owner or program manager can be aided in making the determination of whether a Privacy Impact Assessment 
(PIA) is required by conducting and following Privacy Threshold Analysis (PTA). 

Whether or not a PIA is required, the system owner/program manager should consult with the FBI Records Management Division (RMD) to 
identify and resolve any records issues relating to information in the system. 

A PTA contains basic questions about the nature of the system in addition to a basic system description. The questions are as follows: 

A. General System Description: Please briefly describe: 

1. Type of information in the system: 


[ 


2. Purpose for collecting the information and how it will be used: 


b7E 


3. The system's structure (including components/subsystems): 


b7E 


4. Means of accessing the system and transmitting information to and from the system: 


b7E 


5. Who within FBI will have access to the information in the system and controls for ensuring that only authorized persons 
can access the information: 


6. Who outside the FBI will have access to the information in the system and controls for ensuring that only authorized persons 
n access the information: 


No o 


Has this system been certified and accredited by the FBI Security Divisions? 
Is this system encompassed within an OMB-300? _Yes 

(if yes, please attach copy of latest one.) 
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I. Was the system developed prior to April 17,2003? 

_X_ YES (If "yes," proceed to Question 1.) 

_NO (If "no," proceed to Section II.) 

1. Has the system undergone any significant changes since April 17,2003? 

_YES If "yes," please explain the nature of those changes: 


FBI PRIVACY THRESHOLD ANALYSIS (PTA) 
NAME OF SYSTEM: | | b7E 


(Continue to Question 2.) 

_X_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

2. Do the changes involve the collection, maintenance, or dissemination of information in identifiable form about individuals? 

_YES (If "yes," please proceed to Question 3.) 

_NO (If "no,"the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for review, approval, 

and forwarding to DOJ’s Privacy and Civil Liberties Office. Unlessyou are otherwise advised, no PIA is required.) 

3. Is the system solely related to internal government operations? 

_YES If "yes,” is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) for 

review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unlessyou are otherwise advised, 
no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_NO (If "no," go to section III to determine if afull or short-form PIA is required.) 


II. For systems developed after April 17, 2003. 


1. What is the purpose of the system? (Answer in detail unless details already provided in A. 2 above): 

b7E 

(Continue to Question 2.) 

2. Does the system collect, maintain or disseminate information in identifiable form about individuals? 
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_YES (If "yes," please proceed to Question 3.) 

X_NO (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU)for review, approval, 

and forwarding to DOJ's Privacy and Civil Liberties Office. Unless you are otherwise advised, no PIA is required.) 


3. Is the system solely related to internal government operations? 

_YES If "yes," is this a Major Information System (as listed on OGC's FBINET website)?: 

_Yes. (If "yes," afull PIA is required.. PTA is complete.) 

_No. (If "no," the PTA is complete and should be sent to FBI OGC's Privacy and Civil Liberties Unit (PCLU) 

for review, approval, and forwardingto DOJ's Privacy and Civil Liberties Office. Unless you are otherwise 
advised, no PIA is required. (FBI and DOJ reviewing officials reserve the right to require a PIA.)) 

_X NO (If "no,"go to section III to determine if afull or short-form PIA is required.) 


III. Full or Short-Form PIA 


1. Is the system a major information system (as listed on OGC's FBINET website)? 
_YES (If "yes," a full PIA is required. PTA is complete.) 

_NO (If "no," please continue to question 2.) 

2. Does the system involve routine information AND have limited use/access? 


_YES A short-form PIA is required. (l.e.,you need only answer Questions 1.1,1.2,2.1,3.1,4.1,5.1 (if appropriate), 6.2,6.3, 

and 8.9 of the PIA template.) Please note that FBI 
and DOj reviewing officials reserve the right to 
require completion of afull PIA. (PTA is 
complete—forward with PIA.) 


(If "no," a full PIA is required. 


PTA is complete.) 
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FBI PRIVACY TMMES.II.OLI> ANALYSIS (FTA) 

(Equsv&ktn toth* DOJ Initial ?t v As.^mssmt OF A)) 



B.I.KR FBI li»k|8« Asset ID: N /A 
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FBI PTA: Q 




FINAL FBI APPROVAL / DETERMINATIONS / CONDITIONS: 


PIA is requited by the EAdovemment Act. 

Pi A is to be completed; at a matter of FBI/DDJ discretion. 

Is PI A to be published oh FBT.GOV (after any RMD FOIA redactions)?' 


Yes, 


_ No : 


Limited PI! b involved at this stage. 


X PIA is not required tor the following reason(s): 

S> stem does not collect, maintain, or disseminate Pil. 

fts Am si gs uJtet .ered ( n evstenu? Kaosc 4/1 > 2003 nv> aner changes pw<> 'g Mgmoe&nt pr ars f ^ 

_information in the system relates to internal government operations. 

___ System has been previously assessed under an evaluation simiiat to a PIA 
No siarif lcani privacy issu es for privacy issues are unchanged) 

X Other: | ~\is a proof of concept project. This is a National Security Systeml I -,J 


| £b 3 
b7E 


Applicable SORNfs): 


Notify FBI RMD/RIDS per MIQG 190.2.3'; _No _Yes-See sample EC on PCLU intranet website hes 

http' hotocdX) OGC LiB POLU/FmacsCKd®A?0LtbertiesNG0Librar>'tbuu_tor_ miog' 90*2-3 cc.wpd 


SORN-SORN evisiora'st required? _ No 


i v* i <• ■ ' 


RECORDS. The program should consult with RMD to identify/resoive any Federal record s/electronic records issues. 
The system may contain Federal recotcN whether or not it contains Privacy Act requests and, in any event, a records 
schedule approved by the National Archives and Records Administration i$ necessary. RMD can provide advice on this 
as wel l as on compliance with requirements tor Electronic Recordke eping Certificati on and any necessa ry' update s. 


i f the Proof of Concept is successful^ 


T 


v PTA should he prepared and 


submitted to PCLU so that a determination can he made of whether a PIA or other documentation is required. 


Ib3 

b7E 


Signature: J70HJ 


R lira bet h Ross Wirhnel! 

Acting Deputy General Counsei & 
Privacy and Civil Liberties Officer 
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X Yes. bbormation systems- operated by contractors tbr the FBI may be 


considered Privacy Act systems o.f records 'The Federal Acquisition Regulation 
cemm.ca standard contract clauses that must Pc included m the event the system 
collects. mairttamy-bksJisscmmates Pit and additional requirements may be 
imposed as a matter of Denar totem of Justice policy. Cl ones ha boos wills the 
Office of the General Cotmse! may be required if a routraesa is operating rite 
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Mfof I he Ft \ w now conupkti aud bAx xupps^mfow 'foouhl he 

wshontud to FBI Out Ik 1 l Pw fond I Hi appem B and cktt> rmrutwn d 
FI X xoo % ? orfo* *uoow me wxpoub 

IL RM!M, VixO'Xfo PUO*i'< VS 

L When was the sysmrn/prfoeof developed? 

2. Has the systcm/proieci undergone any significant changes since Aprii i /, 2003° 

NO lit no, proceed to next question {II 3yj 


YhS if yea, indicate which of the following changes were involved (mark all 
Foxes that apply y 

A conversion tone paper-based records to an electronic system. 

A change from information In a format that is anonymous or non- 
ideothkible to a format that is identifiable to panicniar individuals. 

.. A new use of an IT system/proiect. including application of a new 

technology, that changes how information in identifiable form is managed 
{For example, a change that would cream a more open environment and/or 
avenue for exposure of data that previous iy did not exist. ) 

A change that results in information in identifiable iorw being 
merged, centralized, or matched with other databases. 

A new method of authenticating the use of and access to 

A systematic incorporation of databases of information in. 
identifiable form purchased or obtained from commercial or public sources. 


c 



epic.org 


14-06-04-FBI-FOIA-20150318-4th-Production 


EPIC-935 







